A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your existing Security Policy rules.
References
| Link | Resource |
|---|---|
| https://security.paloaltonetworks.com/CVE-2024-3383 | Vendor Advisory |
| https://security.paloaltonetworks.com/CVE-2024-3383 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
24 Jan 2025, 15:29
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
| References | () https://security.paloaltonetworks.com/CVE-2024-3383 - Vendor Advisory | |
| First Time |
Paloaltonetworks
Paloaltonetworks pan-os |
|
| CWE | NVD-CWE-Other | |
| CPE | cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* |
10 Apr 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-10 17:15
Updated : 2025-01-24 15:29
NVD link : CVE-2024-3383
Mitre link : CVE-2024-3383
JSON object : View
Products Affected
paloaltonetworks
- pan-os
CWE